$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDC/J0X1kLXkck-wx0BVTdos5Vvd3u8.roa File: J0X1kLXkck-wx0BVTdos5Vvd3u8.roa (raw, json) Hash identifier: cQjrH6PXj9DnjZcyAAqYjWA37sXR4WSnhN7ZW2AlE94= Subject key identifier: 27:45:F5:90:B5:E4:72:4F:B0:C7:40:55:4D:DA:2C:E5:5B:DD:DE:EF Certificate issuer: /CN=063F818DACB171B835415ABD278993922F3CDC5D Certificate serial: 0134 Authority key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/J0X1kLXkck-wx0BVTdos5Vvd3u8.roa Signing time: Mon 26 Aug 2024 05:27:44 +0000 ROA not before: Mon 26 Aug 2024 05:27:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18041 IP address blocks: 103.220.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063F818DACB171B835415ABD278993922F3CDC5D Validity Not Before: Aug 26 05:27:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2745F590B5E4724FB0C740554DDA2CE55BDDDEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:af:79:3e:9c:6e:28:32:76:41:ab:f7:c1: 3d:78:0e:d3:60:6b:ce:78:7f:f1:af:32:6e:f2:ae: 18:42:2e:ec:dd:ce:79:1b:85:4b:8a:6a:e4:8c:fd: 5f:fb:b2:10:ba:c4:d0:0c:d5:f5:5e:09:d9:cf:eb: f4:d0:34:ac:83:a7:15:72:8f:aa:1a:4e:61:5c:6f: d2:21:b3:9c:93:0f:d0:e9:fd:ff:f5:5a:7f:cc:7a: 8e:1c:e6:52:84:eb:e1:86:75:1d:51:ea:57:c2:61: 61:d0:78:94:93:5a:61:4c:a1:4f:49:da:01:58:97: 37:7d:58:ac:21:f0:79:95:46:3d:c3:58:78:e7:26: c2:45:b3:82:d9:54:76:9e:eb:65:bc:43:a4:1f:f9: 9c:20:a8:8e:16:ec:9f:6c:3e:82:9e:c8:de:b2:3c: 3f:7c:eb:77:b6:89:61:c6:d3:f0:ca:ad:70:19:69: bd:08:87:c5:75:65:a2:84:9d:a8:fc:4e:01:1e:b8: a1:a8:35:d7:5e:bb:97:e2:62:ca:15:ca:c3:44:c6: 52:45:24:28:5e:3f:bc:6f:c1:87:93:f5:50:8d:a8: 29:ca:57:71:61:09:6c:c8:03:6b:48:4d:cd:35:b4: 97:5f:c7:fb:b3:fa:9f:b0:e5:22:18:3f:f7:26:c8: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:45:F5:90:B5:E4:72:4F:B0:C7:40:55:4D:DA:2C:E5:5B:DD:DE:EF X509v3 Authority Key Identifier: keyid:06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/J0X1kLXkck-wx0BVTdos5Vvd3u8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.218.0/23 Signature Algorithm: sha256WithRSAEncryption 12:66:2f:c5:e7:61:1e:da:38:10:d9:58:d5:c9:24:2d:5d:43: a5:cd:a9:14:e0:1d:c8:77:70:a7:c1:88:bf:fd:e7:5a:5b:ef: c9:54:7c:7c:78:ce:b5:d8:12:f5:1a:36:87:aa:40:4d:77:83: f1:83:09:da:59:d7:1b:0a:d8:bd:80:ef:8d:a1:91:a9:19:75: 4a:cd:e2:e3:26:b7:c6:d5:39:87:5b:fc:39:f9:7a:95:d7:97: d5:4e:75:ba:9c:0c:36:83:3e:0f:dd:b4:b1:8a:ee:c2:b5:2f: 18:73:c5:9e:08:a9:91:da:bb:d7:af:72:ee:e5:a9:4c:5c:69: 9f:b7:77:76:e5:7d:be:af:4b:f5:cb:65:4e:83:15:61:be:49: f5:29:ea:d6:61:21:e5:ed:54:fb:dc:9c:04:02:b8:1b:1d:f3: be:ed:04:81:e4:cc:66:7d:4a:88:a2:fb:10:93:4e:26:2b:c7: 9f:9d:e9:70:83:e0:9c:cc:86:62:7f:8f:9e:2f:3e:a2:64:e6: 8d:3e:12:16:d3:8f:84:b4:65:1a:07:96:1f:76:ef:c4:15:f5: da:de:99:da:53:1a:5a:86:fa:0b:6d:89:fe:53:1d:21:82:2a: 6d:fc:df:32:34:a7:0c:81:44:f7:0b:02:45:5b:d1:81:cd:e0: 50:c6:6f:1a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICATQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYz RjgxOERBQ0IxNzFCODM1NDE1QUJEMjc4OTkzOTIyRjNDREM1RDAeFw0yNDA4MjYw NTI3NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3NDVGNTkwQjVFNDcy NEZCMEM3NDA1NTREREEyQ0U1NUJERERFRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCswa95PpxuKDJ2Qav3wT14DtNga854f/GvMm7yrhhCLuzdznkb hUuKauSM/V/7shC6xNAM1fVeCdnP6/TQNKyDpxVyj6oaTmFcb9Ihs5yTD9Dp/f/1 Wn/Meo4c5lKE6+GGdR1R6lfCYWHQeJSTWmFMoU9J2gFYlzd9WKwh8HmVRj3DWHjn JsJFs4LZVHae62W8Q6Qf+ZwgqI4W7J9sPoKeyN6yPD9863e2iWHG0/DKrXAZab0I h8V1ZaKEnaj8TgEeuKGoNddeu5fiYsoVysNExlJFJCheP7xvwYeT9VCNqCnKV3Fh CWzIA2tITc01tJdfx/uz+p+w5SIYP/cmyDFVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUJ0X1kLXkck+wx0BVTdos5Vvd3u8wHwYDVR0jBBgwFoAUBj+Bjayxcbg1QVq9 J4mTki883F0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERDL0Jq LUJqYXl4Y2JnMVFWcTlKNG1Ua2k4ODNGMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev QmotQmpheXhjYmcxUVZxOUo0bVRraTg4M0YwLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVERDL0owWDFrTFhrY2std3gwQlZUZG9zNVZ2 ZDN1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn3NowDQYJ KoZIhvcNAQELBQADggEBABJmL8XnYR7aOBDZWNXJJC1dQ6XNqRTgHch3cKfBiL/9 51pb78lUfHx4zrXYEvUaNoeqQE13g/GDCdpZ1xsK2L2A742hkakZdUrN4uMmt8bV OYdb/Dn5epXXl9VOdbqcDDaDPg/dtLGK7sK1LxhzxZ4IqZHau9evcu7lqUxcaZ+3 d3blfb6vS/XLZU6DFWG+SfUp6tZhIeXtVPvcnAQCuBsd877tBIHkzGZ9Soii+xCT TiYrx5+d6XCD4JzMhmJ/j54vPqJk5o0+EhbTj4S0ZRoHlh9278QV9dremdpTGlqG +gttif5THSGCKm383zI0pwyBRPcLAkVb0YHN4FDGbxo= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org